21日 木曜日、友引

+ Red Hat Enterprise Linux 10.2 released

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index

+ Red Hat Enterprise Linux 9.8 released

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index

+ RHSA-2026:19666 Important: kernel security update

https://access.redhat.com/errata/RHSA-2026:19666

CVE-2026-46300

CVE-2026-46333

+ RHSA-2026:19588 Important: firefox security update

https://access.redhat.com/errata/RHSA-2026:19588

CVE-2026-7320

CVE-2026-7321

CVE-2026-7322

CVE-2026-7323

+ RHSA-2026:19559 Important: libsndfile security update

https://access.redhat.com/errata/RHSA-2026:19559

CVE-2026-37555

+ RHSA-2026:19610 Important: libsndfile security update

https://access.redhat.com/errata/RHSA-2026:19610

CVE-2026-37555

+ Google Chrome 149.0.7827.22/.23 released

https://chromereleases.googleblog.com/2026/05/early-stable-update-for-desktop.html

+ Mozilla Thunderbird 151.0 released

https://www.thunderbird.net/en-US/thunderbird/151.0/releasenotes/

+ ISC BIND 9.20.23, 8.18.49 released

https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.18.49/doc/arm/html/notes.html

+ FreeBSD-SA-26:24.cap_net Incorrect libcap_net limitation list manipulation

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:24.cap_net.asc

CVE-2026-45254

+ FreeBSD-SA-26:23.bsdinstall Remote code execution via installer Wi-Fi access point scans

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:23.bsdinstall.asc

CVE-2026-45255

+ FreeBSD-SA-26:22.libcasper select(2) file descriptor set overflow causes stack overflow

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:22.libcasper.asc

CVE-2026-39461

+ FreeBSD-SA-26:21.ptrace Missing validation in ptrace(PT_SC_REMOTE)

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:21.ptrace.asc

CVE-2026-45253

+ FreeBSD-SA-26:20.fusefs Heap overflow in FUSE_LISTXATTR

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:20.fusefs.asc

CVE-2026-45252

+ FreeBSD-SA-26:19.file Kernel use-after-free via file descriptor syscalls

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:19.file.asc

CVE-2026-45251

+ FreeBSD-SA-26:18.setcred Stack buffer overflow via setcred(2)

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:18.setcred.asc

CVE-2026-45250

+ VU#980487 Local privilege escalation in Linux Kernel (Dirty Frag)

https://www.kb.cert.org/vuls/id/980487

CVE-2026-43284

CVE-2026-43500

+ BIND9の脆弱性(High: CVE-2026-3039, CVE-2026-3593, CVE-2026-5946, CVE-2026-5947, Medium: CVE-206-3592, CVE-206-5950)と9.18.49, 9.20.23, 9.21.22公開

https://security.sios.jp/vulnerability/bind-security-vulnerability-20260520/

CVE-2026-3039

CVE-2026-3593

CVE-2026-5946

CVE-2026-5947

CVE-206-3592

CVE-206-5950

ネットワーク図の描き方入門 第8回

良い物理構成図を描くコツ　ラックやフロアごとに標準的な構成を設計

https://xtech.nikkei.com/atcl/nxt/column/18/03451/042700008/?ST=nxt_thmit_security

8分野で導入率を解説、第3回セキュリティー製品利用実態調査 第1回

EDRやIDaaSのベンダー別導入率を独自調査、海外勢に割り込む国内ベンダー

https://xtech.nikkei.com/atcl/nxt/column/18/03622/051900001/?ST=nxt_thmit_security

JVN#56484285 Movable Typeにおける権限チェックの欠如の脆弱性

https://jvn.jp/jp/JVN56484285/index.html

JVNVU#93461473 Androidアプリ「パスワード管理 ロボフォーム」のintent処理における検証不備の脆弱性

https://jvn.jp/vu/JVNVU93461473/index.html

JVNVU#93294524 CISA ICS Advisory / ICS Medical Advisory（2026年05月19日）

https://jvn.jp/vu/JVNVU93294524/index.html